Claude Platform Docs

Issuers

Create Federation Issuer
$client->organization->federation->issuers->create(string issuerURL, string name, ?bool checkJTI, ?JWKS jwks, ?int maxJWTLifetimeSeconds): FederationIssuer
POST/v1/organizations/federation_issuers

Requires an OAuth access token with the org:admin scope, from ant auth login --scope org:admin or a workload identity federation rule; Admin API keys are not accepted. See Manage WIF with the Admin API.

List Federation Issuers
$client->organization->federation->issuers->list(?bool includeArchived, ?int limit, ?string page): PageCursor<FederationIssuer>
GET/v1/organizations/federation_issuers

Requires an OAuth access token with the org:admin scope, from ant auth login --scope org:admin or a workload identity federation rule; Admin API keys are not accepted. See Manage WIF with the Admin API.

Get Federation Issuer
$client->organization->federation->issuers->retrieve(string federationIssuerID): FederationIssuer
GET/v1/organizations/federation_issuers/{federation_issuer_id}

Requires an OAuth access token with the org:admin scope, from ant auth login --scope org:admin or a workload identity federation rule; Admin API keys are not accepted. See Manage WIF with the Admin API.

Update Federation Issuer
$client->organization->federation->issuers->update(string federationIssuerID, ?bool checkJTI, ?string issuerURL, ?JWKS jwks, ?bool jwksPollingDisabled, ?int maxJWTLifetimeSeconds, ?string name): FederationIssuer
POST/v1/organizations/federation_issuers/{federation_issuer_id}

Requires an OAuth access token with the org:admin scope, from ant auth login --scope org:admin or a workload identity federation rule; Admin API keys are not accepted. See Manage WIF with the Admin API.

Archive Federation Issuer
$client->organization->federation->issuers->archive(string federationIssuerID): FederationIssuer
POST/v1/organizations/federation_issuers/{federation_issuer_id}/archive

Requires an OAuth access token with the org:admin scope, from ant auth login --scope org:admin or a workload identity federation rule; Admin API keys are not accepted. See Manage WIF with the Admin API.

Models
class FederationIssuer { $type = 'federation_issuer'; $id; $archivedAt; /* 12 more */ }
class FederationIssuerPollStatus { $consecutiveFailures; $lastFetchedAt; $nextPollAt; }
int consecutiveFailures

Consecutive fetch failures since the last success.

?\Datetime lastFetchedAt

When the last successful fetch completed.

?\Datetime nextPollAt

When the next fetch is scheduled. Null if paused.

class JWKSDiscovery { $type = 'discovery'; $caCertPEM; $discoveryBase; }
"discovery" type
?string caCertPEM

Optional custom CA (PEM) for TLS verification of the JWKS fetch.

?string discoveryBase

Set when the discovery URL differs from issuer_url.

class JWKSExplicitURL { $type = 'explicit_url'; $url; $caCertPEM; }
"explicit_url" type
string url

JWKS endpoint.

?string caCertPEM

Optional custom CA (PEM) for TLS verification of the JWKS fetch.

class JWKSInline { $type = 'inline'; $keys; }
"inline" type
list<array<string,mixed>> keys

Inline JWK objects.